Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-58290 PoC — DeoThemes Xhibiter NFT Marketplace SQL注入漏洞

Source
https://github.com/SohelYousef/CVE-2024-58290-Xhibiter-SQLi
Associated Vulnerability
Title:DeoThemes Xhibiter NFT Marketplace SQL注入漏洞 (CVE-2024-58290)
Description:DeoThemes Xhibiter NFT Marketplace是DeoThemes公司的一个建站工具。 DeoThemes Xhibiter NFT Marketplace 1.10.2版本存在SQL注入漏洞，该漏洞源于collections端点中id参数存在SQL注入，可能导致数据库信息泄露或篡改。
Description
Proof of Concept (PoC) for SQL Injection in Xhibiter NFT Marketplace 1.10.2 (Collections Endpoint). Discovered by Sohel Yousef.
File Snapshot

 None
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.